The IP Spoofer is a Trojan

Ken Williams reports that the program called "theipspoof.zip" is another Back Orifice trojan masquerading as a "point & click, automagical IP spoofer". It is currently being distributed on underground web sites and is billed as the latest and greatest IP spoofing tool with a neato GUI.

| Brief Details |

file sizes
----------
theipspoof.zip 310229
Spoof.dmo 124928
IPSpoof.exe 64000

md5 checksums
-------------
MD5 (/tmp/theipspoof.zip) = 931e7e31a1e3b8ec0f519b5f846b1d31
MD5 (/tmp/Spoof.dmo) = ea44ad07faaf4352a7fda78d3a7d4563
MD5 (/tmp/IPSpoof.exe) = 4c2aa980adca9683f8e6fe23a89e53a6

trojan
------

This is Back Orifice with Butt Trumpet plugin.